Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YuAiNH1hJp_8EhZzudiJ_yknWfc.roa
File: YuAiNH1hJp_8EhZzudiJ_yknWfc.roa (raw, json)
Hash identifier: FCVFwqAt9b/j8mlqWgQiFQT4K3S+n2hDPT1dU0l2jqg=
Subject key identifier: 62:E0:22:34:7D:61:26:9F:FC:12:16:73:B9:D8:89:FF:29:27:59:F7
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA82B53BC71994EC8BD653A0ABB26B
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YuAiNH1hJp_8EhZzudiJ_yknWfc.roa
Signing time: Wed 01 Jan 2025 03:48:18 +0000
ROA not before: Wed 01 Jan 2025 03:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199487
IP address blocks: 2a0c:b641:a00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:82:b5:3b:c7:19:94:ec:8b:d6:53:a0:ab:b2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62e022347d61269ffc121673b9d889ff292759f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f7:95:70:a4:71:f5:6f:56:be:b7:1d:f0:bd:
b5:d3:51:98:16:ed:34:ba:4e:bd:db:ce:47:1e:97:
75:0a:3c:0d:e2:d1:c1:56:81:03:1f:53:a8:c2:57:
6a:b3:f9:e5:cb:25:bc:02:c6:23:54:83:bf:4c:50:
65:31:0f:04:4c:28:a7:8c:04:7f:38:a1:94:35:9a:
4e:d8:e9:5b:74:c1:6f:6a:e6:2f:ff:89:53:00:ea:
74:5a:5f:ae:37:1d:6a:7a:3b:4d:07:6c:d2:17:79:
b6:63:e3:3d:b3:63:8e:45:6f:07:8b:f1:7b:78:50:
69:03:e1:73:01:03:dc:2f:6f:ce:fc:68:c8:02:e6:
6a:5c:6e:8a:62:84:88:32:c7:a4:c3:04:fc:4c:e7:
30:f1:21:ab:bb:0c:53:fa:58:f1:65:6b:cf:ca:69:
1a:84:29:cf:ed:ef:36:ae:25:8a:b4:68:d8:34:a5:
a4:b8:15:f1:a7:bc:1f:fc:63:84:04:6d:1d:58:dc:
4b:a0:1f:4c:a1:30:2b:81:50:d5:3c:aa:87:a1:34:
b2:b7:6d:cc:46:12:52:d9:80:ca:ae:cb:b4:78:12:
39:d6:ca:f2:69:7d:8f:a1:6e:c4:16:db:7d:61:49:
97:d2:3d:d2:1b:fc:90:18:1b:31:06:7b:ff:88:7f:
47:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E0:22:34:7D:61:26:9F:FC:12:16:73:B9:D8:89:FF:29:27:59:F7
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YuAiNH1hJp_8EhZzudiJ_yknWfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:a00::/44
Signature Algorithm: sha256WithRSAEncryption
58:fe:3e:0f:c0:47:7d:cc:c8:93:50:d7:a5:ee:e6:f0:05:f2:
00:da:8d:de:32:c2:aa:c0:c7:8d:b1:27:fd:9e:86:5b:3a:bb:
bd:8d:5b:6c:51:71:6f:f3:cd:64:45:a2:f3:db:48:a6:ed:cc:
42:86:2c:42:fe:c8:bd:3f:64:dc:cb:b0:b3:ea:ae:9d:61:d1:
7e:55:fc:62:c9:06:f6:31:d6:11:75:84:62:83:61:10:85:5a:
c5:77:70:00:5f:70:3a:c9:70:a4:10:ae:14:3d:89:81:06:18:
9f:98:bc:91:16:a1:36:67:59:d4:ce:37:aa:89:b5:02:da:ec:
a9:f0:58:c2:02:be:c7:47:f1:dc:88:34:64:ff:0e:73:12:d0:
2a:89:c3:3b:f3:3c:18:e8:a5:40:f0:97:fd:00:59:80:cd:04:
93:5c:12:99:07:bc:ca:d3:8c:24:7a:fb:c7:8e:23:6b:dc:4a:
c9:4f:ea:ae:67:23:b7:06:37:0d:18:d4:3a:01:69:51:2d:cd:
a7:82:0a:4e:52:ad:80:11:f7:6d:bd:2a:28:19:64:27:df:1d:
70:6e:5c:0e:fd:cc:26:79:1f:75:d8:4f:76:fa:82:a1:5a:72:
73:26:c0:ac:af:f4:86:e1:9c:aa:dc:3e:19:21:e1:1a:0d:d2:
a9:ee:05:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:44:28 2025 by rpki-client